Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/004eb73e-1530-44a4-bc24-ae341a82d106.roa
File: 004eb73e-1530-44a4-bc24-ae341a82d106.roa (raw, json)
Hash identifier: g30fgPTNmKGaenIOmmmd6UjFpnhEMnB+dVM1BsIIuN0=
Subject key identifier: 5D:91:99:FB:02:70:16:E0:CB:2C:F5:9A:40:80:FD:3B:09:6B:C5:C9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7A2C4B056C0A92BD6708B3DF8ED6C04A8D00B3B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/004eb73e-1530-44a4-bc24-ae341a82d106.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2c:4b:05:6c:0a:92:bd:67:08:b3:df:8e:d6:c0:4a:8d:00:b3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:90:fa:2b:3f:05:f7:d2:b4:26:cd:ac:6b:
7c:34:48:a6:bf:e0:4b:33:77:2a:7a:8a:de:97:44:
9e:d9:86:58:b8:34:c7:5f:0b:87:05:1f:36:a0:67:
87:5f:14:19:fb:67:4a:4f:04:66:00:6a:32:d5:ae:
16:ca:54:4d:74:e9:0a:80:59:00:c5:3c:b9:63:16:
63:71:6a:18:0b:5f:4d:fc:7b:7f:4e:82:a1:e5:7a:
20:9e:1c:d2:63:7d:de:33:42:cb:a0:51:cf:10:5b:
60:06:9f:9d:05:30:d8:23:d3:39:75:9f:6f:63:88:
b2:79:42:c3:9d:e2:fd:9c:b3:e8:f6:83:6b:f3:96:
55:78:3b:c3:57:76:4e:0a:0b:90:dc:88:40:26:cb:
a3:39:94:45:da:4d:53:43:63:4e:fc:99:cd:a7:7a:
90:29:83:6c:db:f9:b2:ef:84:0d:27:78:eb:f7:5b:
a5:3d:a1:d2:ad:a0:3d:5c:7b:be:f8:47:f3:df:92:
1b:28:57:7a:d2:ea:59:f3:8b:80:bd:65:33:bd:af:
06:b7:c2:62:2c:5b:dc:4c:83:89:6e:2e:8b:af:15:
7e:b6:16:95:80:a5:b7:82:1c:49:c7:99:b6:86:de:
64:77:c5:db:81:57:24:08:a3:10:2e:25:db:0f:96:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:99:FB:02:70:16:E0:CB:2C:F5:9A:40:80:FD:3B:09:6B:C5:C9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/004eb73e-1530-44a4-bc24-ae341a82d106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:93:e4:7b:48:26:73:d5:fd:4a:43:9a:4e:83:8a:df:1b:2d:
47:43:0c:77:d5:5b:96:5e:70:12:a6:6c:5e:76:84:39:f5:3a:
23:98:9b:f3:a8:61:d5:5b:4f:a0:d8:26:a7:9b:7c:67:b0:60:
07:76:6f:3d:c4:1b:80:7f:38:bc:af:1f:b1:e1:7a:14:9c:28:
2e:7f:86:7e:35:03:24:12:cc:ed:ac:aa:d7:39:5e:35:29:a4:
41:37:83:16:82:aa:dc:75:de:ac:87:60:46:19:f0:73:fb:b2:
0b:b8:09:17:62:fc:70:17:fe:59:ae:54:d8:91:cd:38:ee:f6:
41:d8:17:1d:f8:2f:2e:2a:f0:9b:78:13:49:ff:7e:ca:55:11:
5f:67:ae:32:a7:03:00:9c:c7:51:26:1c:30:54:a7:fb:7b:89:
53:09:26:34:cd:80:d5:4c:eb:d8:bc:35:f8:ea:b7:72:43:66:
39:5c:f5:e4:5e:52:4a:3d:34:1e:6a:0f:58:28:6c:a3:7f:d6:
d9:fe:aa:39:ff:58:f6:2f:06:68:ac:96:3c:5f:86:7d:9c:df:
70:12:0a:0c:7b:49:bd:96:92:6c:3a:fd:58:bf:49:77:a8:84:
db:fd:52:50:90:90:5e:ee:96:89:9a:d8:ec:2e:62:74:95:d2:
b2:fb:34:0f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeixLBWwKkr1nCLPfjtbASo0As7QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTJjZjkzMmJlYzYyMDk0NGM4NDk2ODczN2IxYzk3ZGFk
M2ZhNjExMTczMDUzODUxN2E2OWQ5ZmFmNTM2MjMwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDC3pD6Kz8F99K0Js2sa3w0SKa/4Eszdyp6it6XRJ7Zhli4
NMdfC4cFHzagZ4dfFBn7Z0pPBGYAajLVrhbKVE106QqAWQDFPLljFmNxahgLX038
e39OgqHleiCeHNJjfd4zQsugUc8QW2AGn50FMNgj0zl1n29jiLJ5QsOd4v2cs+j2
g2vzllV4O8NXdk4KC5DciEAmy6M5lEXaTVNDY078mc2nepApg2zb+bLvhA0neOv3
W6U9odKtoD1ce774R/PfkhsoV3rS6lnzi4C9ZTO9rwa3wmIsW9xMg4luLouvFX62
FpWApbeCHEnHmbaG3mR3xduBVyQIoxAuJdsPlvd/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXZGZ+wJwFuDLLPWaQID9OwlrxckwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAwNGViNzNlLTE1MzAtNDRhNC1iYzI0LWFlMzQxYTgyZDEwNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIiT5HtIJnPV/UpDmk6Dit8bLUdD
DHfVW5ZecBKmbF52hDn1OiOYm/OoYdVbT6DYJqebfGewYAd2bz3EG4B/OLyvH7Hh
ehScKC5/hn41AyQSzO2sqtc5XjUppEE3gxaCqtx13qyHYEYZ8HP7sgu4CRdi/HAX
/lmuVNiRzTju9kHYFx34Ly4q8Jt4E0n/fspVEV9nrjKnAwCcx1EmHDBUp/t7iVMJ
JjTNgNVM69i8Nfjqt3JDZjlc9eReUko9NB5qD1gobKN/1tn+qjn/WPYvBmisljxf
hn2c33ASCgx7Sb2Wkmw6/Vi/SXeohNv9UlCQkF7uloma2OwuYnSV0rL7NA8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:12:15 2025 by rpki-client